Systems and methods for third-party agent broker automations

Abstract

Techniques (e.g., software, hardware, and/or machine-learned model(s)) may generate a third-party agent broker for validating data access requests on behalf of a resource provider. This third-party agent broker may validate the data access requests against a personalized access model associated with the resource provider. The context of the data access requests may be checked for similarity to the personalized access model (e.g., via embedding the data access request and the personalized access model). The data access requests may then be fulfilled based on validating the context of the data access requests.

What is claimed is: 
     
         1 . A system comprising:
 one or more processors; and   one or more non-transitory computer-readable media that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
 receiving a data access request that is associated with accessing one or more resources available via a resource provider system; 
 determining whether a valid access token exists to fulfill the data access request; 
 in response to determining a lack of existence of the valid access token, determining an access request context; 
 validating the access request context by querying a personalized access model associated with a resource owner of the one or more resources; 
 generating, based at least in part on validating the access request context, the valid access token; and 
 generating, based at least in part on the valid access token, a response to the data access request. 
   
     
     
         2 . The system of  claim 1 , wherein validating the access request context further comprises:
 determining first embeddings associated with the personalized access model;   determining second embeddings associated with the data access request; and   determining that a similarity metric between the first embeddings and the second embeddings satisfies a threshold similarity metric.   
     
     
         3 . The system of  claim 1 , wherein the data access request comprises a request to one of retrieve data associated with the one or more resources, modify the data associated with the one or more resources, or delete the data associated with the one or more resources. 
     
     
         4 . The system of  claim 1 , wherein determining the access request context comprises determining one or more of a timestamp associated with the data access request, a relationship between a requesting entity and the one or more resources, and an Internet Protocol (IP) address of the requesting entity. 
     
     
         5 . The system of  claim 1 , wherein the personalized access model is generated based at least in part on one or more of a privacy policy, a data storage policy, terms of service, and a confidentiality order. 
     
     
         6 . The system of  claim 1 , wherein validating the access request context further comprises:
 determining a document classification of a document in the personalized access model;   determining an access policy based at least in part on the document classification of the document; and   wherein generating the response to the data access request is based further on the access policy.   
     
     
         7 . The system of  claim 6 , wherein the access policy is one of attribute-based access, role-based access, or discretionary access. 
     
     
         8 . A method, implemented at least in part by one or more computing devices, the method comprising:
 receiving a data access request that is associated with accessing one or more resources available via a resource provider system;   determining whether a valid access token exists to fulfill the data access request;   in response to determining a lack of existence of the valid access token, determining an access request context;   validating the access request context by querying a personalized access model associated with a resource owner of the one or more resources;   generating, based at least in part on validating the access request context, the valid access token; and   generating, based at least in part on the valid access token, a response to the data access request.   
     
     
         9 . The method of  claim 8 , wherein validating the access request context further comprises:
 determining first embeddings associated with the personalized access model;   determining second embeddings associated with the access request; and   determining that a similarity metric between the first embeddings and the second embeddings satisfies a threshold similarity metric.   
     
     
         10 . The method of  claim 8 , wherein the data access request comprises a request to one of retrieve data associated with the one or more resources, modify the data associated with the one or more resources, or delete the data associated with the one or more resources. 
     
     
         11 . The method of  claim 8 , wherein determining the access request context comprises determining one or more of a timestamp associated with the data access request, a relationship between a requesting entity and the one or more resources, and an Internet Protocol (IP) address of the requesting entity. 
     
     
         12 . The method of  claim 8 , wherein the personalized access model is generated based at least in part on one or more of a privacy policy, a data storage policy, terms of service, and a confidentiality order. 
     
     
         13 . The method of  claim 8 , wherein validating the access request context further comprises:
 determining a document classification of a document in the personalized access model;   determining an access policy based at least in part on the document classification of the document; and   wherein generating the response to the access request is based further on the access policy.   
     
     
         14 . The method of  claim 13 , wherein the access policy is one of attribute-based access, role-based access, or discretionary access. 
     
     
         15 . One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
 receiving a data access request that is associated with accessing one or more resources available via a resource provider system;   determining whether a valid access token exists to fulfill the data access request;   in response to determining a lack of existence of the valid access token, determining an access request context;   validating the access request context by querying a personalized access model associated with a resource owner of the one or more resources;   generating, based at least in part on validating the access request context, the valid access token; and   generating, based at least in part on the valid access token, a response to the data access request.   
     
     
         16 . The one or more non-transitory computer-readable media of  claim 15  wherein validating the access request context further comprises:
 determining first embeddings associated with the personalized access model; 
 determining second embeddings associated with the data access request; and 
 determining that a similarity metric between the first embeddings and the second embeddings satisfies a threshold similarity metric. 
 
     
     
         17 . The one or more non-transitory computer-readable media of  claim 15 , wherein the data access request comprises a request to one of retrieve data associated with the one or more resources, modify the data associated with the one or more resources, or delete the data associated with the one or more resources. 
     
     
         18 . The one or more non-transitory computer-readable media of  claim 15 , wherein determining the access request context comprises determining one or more of a timestamp associated with the data access request, a relationship between a requesting entity and the one or more resources, and an Internet Protocol (IP) address of the requesting entity. 
     
     
         19 . The one or more non-transitory computer-readable media of  claim 15 , wherein the personalized access model is generated based at least in part on one or more of a privacy policy, a data storage policy, terms of service, and a confidentiality order. 
     
     
         20 . The one or more non-transitory computer-readable media of  claim 15 , wherein validating the access request context further comprises:
 determining a document classification of a document in the personalized access model; and   determining an access policy based at least in part on the document classification of the document, the access policy being one of attribute-based access, role-based access, or discretionary access; and   wherein generating the response to the data access request is based further on the access policy.